Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to setup OCSP stapling on Nginx because I ran a test and it suggested the idea and well, you know.

I'm getting the error:

nginx: [warn] "ssl_stapling" ignored, no OCSP responder URL in the certificate

Here's the relevant bits of my .conf

server {
# use Google's DNS
resolver valid=300s;
resolver_timeout 10s;

ssl_stapling on;
ssl_stapling_verify on;
## verify chain of trust of OCSP response using Root CA and Intermediate certs
ssl_trusted_certificate /pathtossl/;
share|improve this question

migrated from Jan 14 '14 at 12:01

This question came from our site for pro webmasters.

This is a question I would ask whoever provided the SSL certificate. – Michael Hampton Mar 10 '14 at 15:11
up vote 4 down vote accepted

The ssl_trusted_certificate option should point to the root certificate and all intermediate certificates of the CA, not your signed certificate. This is made clear in the NGINX documentation here For additional configuration examples, see

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.